Microsoft 365 & IT Administrator
🇽🇰 Prishtina, Kosovo (Remote)
EngineeringITSenior
Compare your skills with our requirements
Hatom is a software development company with over 7 years of experience delivering enterprise-grade solutions to clients across international markets. We are looking for a Microsoft 365 & IT Administrator to own the Microsoft foundations of a Swiss client with 100+ employees across Switzerland (Lausanne HQ) and the Czech Republic (Brno).
The client currently has no dedicated IT administrator, and a recent assessment revealed security gaps: no IT policies, no business continuity plan, MFA not enforced and a low Microsoft Secure Score. You will build their identity, security, backup and support foundations, working under the client's Chief IT & AI Officer.
The engagement runs in two phases: a fast-paced setup phase over a few weeks (Entra ID, MFA, conditional access, SSO for priority applications, backups and password manager), followed by a lighter, recurring maintenance phase (user support, onboarding/offboarding, licensing, connecting new applications, restore tests and security monitoring).
Must-have
- Proven expertise in Microsoft Entra ID: SSO (SAML / OpenID Connect), groups and roles, conditional access and provisioning (SCIM)
- Strong Microsoft 365 administration experience: licensing, Exchange, SharePoint, Teams and OneDrive
- Solid background in information security: MFA, Microsoft Defender, disk encryption and improving Microsoft Secure Score
- Hands-on experience with Microsoft 365 backup and restore solutions
- Ability to connect third-party and internal applications to Entra ID, including when no standard connector exists
- Fluent in English
- Commitment to confidentiality and data hosted in Switzerland or the EU
Is a plus
- Experience with Microsoft Defender and Microsoft 365 backup tools
- Experience connecting internal containerized applications to Entra ID with role-based access
- Experience integrating Odoo, FileMaker or similar business applications with SSO
- Experience with MDM / device provisioning (Intune) and password managers
What you will do
- Set up Microsoft Entra ID as the single source of identity for all employees, with groups and roles per function
- Enforce MFA for 100% of accounts and configure conditional access (managed device, location, risk level)
- Connect external and internal applications to Entra ID via SSO and pass role-based permissions through groups
- Manage joiners and leavers from Entra ID so that a departure revokes all access the same day
- Deploy independent Microsoft 365 backup (Exchange, OneDrive, SharePoint, Teams) and run documented quarterly restore tests
- Roll out a password manager and maintain an inventory of devices and licenses
- Manage licenses, mailboxes, aliases, distribution lists and the SharePoint / Teams structure
- Provide first-level support to 100+ users in Switzerland and the Czech Republic, escalating when needed
- Define incident management procedures, logging and alerting, and run security awareness for employees
- Track Secure Score, access reviews, incidents and license costs on a recurring basis